🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:16014 (see also SUSE bugzilla) Related CVEs: CVE-2026-26986 CVE-2026-27015 CVE-2026-27951 Upstream summary: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0082-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0876-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27138 CVE-2026-33810 CVE-2026-27137 Upstream summary: Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:21968 (see also SUSE bugzilla) Related CVEs: CVE-2025-10921 Upstream summary: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-31038 CVE-2026-40023 CVE-2025-54812 Upstream summary: SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-65493 CVE-2025-65494 CVE-2025-65495 CVE-2026-29013 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65499 +2 more Upstream summary: NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33721 CVE-2007-4542 CVE-2020-10872 CVE-2021-32062 Upstream summary: MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0344-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1666-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4539 Upstream summary: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1494-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1017 CVE-2021-3746 CVE-2026-21444 CVE-2025-49133 CVE-2023-1018 CVE-2021-3623 CVE-2021-3446 CVE-2021-3505 Upstream summary: An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data […]
